CVE-2026-82926: Tee Ta Session Invoke Null Deref

Session pointer obtained from `tee_ta_get_session` is used in `tee_ta_invoke_command` without checking if it is NULL. An invalid or unallocated session ID can result in a NULL pointer dereference and DoS.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-82926-tee-ta-session-invoke-null-deref --engine opengrep

Description

Session pointer obtained from `tee_ta_get_session` is used in `tee_ta_invoke_command` without checking if it is NULL. An invalid or unallocated session ID can result in a NULL pointer dereference and DoS.